[rudder-users] REFUSAL of request / rules status in no answer

[Nicolas Charles]

Oh, I misunderstood something in your description (I skipped the 
/opt/rudder and /var/rudder deletion part)
Here, it seems the promises look for the "old" promises (because of the 
old uuid); so you'll need to reset your promises to fetch the new one.
The procedure is described in the reference manual ( 
http://www.rudder-project.org/rudder-doc-2.6/rudder-doc.html#advancedusage 
) but I'll copy and paste it there for the sake of simplicity :
rm -rf /var/rudder/cfengine-community/inputs/*
cp -a /opt/rudder/share/initial-promises/* 
/var/rudder/cfengine-community/inputs/
/var/rudder/cfengine-community/bin/cf-agent -KI

Also, what are the version of the agent and server you are using ?

Regards,
Nicolas

On 12/07/2013 14:59, Nicolas Charles wrote:
> I'm sorry to hear that it didn't solve your problem.
> So we'll need to do a bit more debugging, and look at the verbose 
> output of the server.
>
> On the Rudder server, kill the cf-serverd process, and then run the 
> following command :
> /var/rudder/cfengine-community/bin/cf-serverd -v --no-fork
> (this runs the server in verbose mode, and leave it in foreground)
>
> On the client side, run an update by running the following command
> /var/rudder/cfengine-community/bin/cf-agent -Kb update
>
> On the server side, it should trigger a lot of message.
> Could you copy it and sent it ? (if you think there are confidential 
> info in it, you can send it to me personnaly)
>
> Thank you !
> Nicolas
>
> On 12/07/2013 14:31, Prestasit01 wrote:
>>
>> Hi,
>>
>> The issue is still here. (Now time is the same on both server).
>>
>> Is it possible to clean the refused node list ?
>>
>> BR
>>
>> *De :*rudder-users-bounces at lists.rudder-project.org 
>> [mailto:rudder-users-bounces at lists.rudder-project.org] *De la part 
>> de* Prestasit01
>> *Envoyé :* vendredi 12 juillet 2013 12:36
>> *À :* Nicolas Charles; rudder-users at lists.rudder-project.org
>> *Objet :* Re: [rudder-users] REFUSAL of request / rules status in no 
>> answer
>>
>> Hi Nicolas,
>>
>> When i search 405b59b6-7e54-4d22-9b1b-e6137d17497a in the quick 
>> search interface, I find the Centos node refused.
>>
>> The following folder exist on the root server => 
>> /var/rudder/share/405b59b6-7e54-4d22-9b1b-e6137d17497a/rules/cfengine-community
>>
>>
>> Root server & node can be ping by their hostname (in both side)
>>
>> There is 5 min of skew between this node and the root-server. I will 
>> update the date and check if it's work in one hour.
>>
>> Thanks for the support
>>
>> BR
>>
>> *De :*rudder-users-bounces at lists.rudder-project.org 
>> <mailto:rudder-users-bounces at lists.rudder-project.org> 
>> [mailto:rudder-users-bounces at lists.rudder-project.org] 
>> <mailto:[mailto:rudder-users-bounces at lists.rudder-project.org]> *De 
>> la part de* Nicolas Charles
>> *Envoyé :* vendredi 12 juillet 2013 12:18
>> *À :* rudder-users at lists.rudder-project.org 
>> <mailto:rudder-users at lists.rudder-project.org>
>> *Objet :* Re: [rudder-users] REFUSAL of request / rules status in no 
>> answer
>>
>> On 12/07/2013 12:06, Prestasit01 wrote:
>>
>> Hello,
>>
>> I got one issue with one node (CentOS release 5.5 + 
>> rudder-agent-2.6.2.release-1.EL.5)
>>
>> Flows between node and server seems to be ok (telnet tested)
>>
>> The node is well inventoried on the root-server but all rules are in 
>> « no answer » status
>>
>> I got this message in /var/log/messages (on the root server) :
>>
>> Jul 12 11:42:14 myrudderserver cf-serverd[19799]:  REFUSAL of request 
>> from connecting host: (SYNCH 1373622422 STAT 
>> /var/rudder/share/405b59b6-7e54-4d22-9b1b-e6137d17497a/rules/cfengine-community/rudder_promises_generated)
>>
>> For information, this node has been refused by me the first time, the 
>> agent has been reinstalled and then i have accepted the node on the 
>> root-server.
>>
>> ( NB : /opt/rudder & /var/rudder were destroyed before the reinstall 
>> of the agent)
>>
>> I hope you will have the answer J
>>
>> Regards
>>
>> C .JARDIN
>>
>>
>> Hi Cédric,
>>
>> From the message on the agent, it seems it cannot get its promise 
>> files from the server.
>> Could you check that on the Rudder server the folder 
>> /var/rudder/share/405b59b6-7e54-4d22-9b1b-e6137d17497a/rules/cfengine-community 
>> exists ?
>>
>> Could you also check that in the web interface, if you search for 
>> 405b59b6-7e54-4d22-9b1b-e6137d17497a in the web interface, does it 
>> refers to you Centos machine ?
>>
>> Finally, there are also two typical issues that may cause this :
>> - Large clock skew between systems : are the time on both the client 
>> and the server (roughly) the same ?
>> - A DNS problem (that's the most comon issue). Can you, from the 
>> server, ping the client by referencing it by its hostname
>>
>> Does it help ?
>> Nicolas
>>
>> -------------------------------------------------------------------------
>> Les informations ou pieces jointes contenues dans ce message sont 
>> confidentielles. Seul le destinataire expressement vise peut en 
>> prendre connaissance. Toute autre personne qui en divulguera, 
>> diffusera ou prendra des copies sera passible de poursuites. La 
>> societe Ouest-France decline en outre, toute responsabilite de 
>> quelque nature que ce soit au titre de ce message s'il a ete altere, 
>> deforme ou falsifie.
>>
>> -------------------------------------------------------------------------
>> Les informations ou pieces jointes contenues dans ce message sont 
>> confidentielles. Seul le destinataire expressement vise peut en 
>> prendre connaissance. Toute autre personne qui en divulguera, 
>> diffusera ou prendra des copies sera passible de poursuites. La 
>> societe Ouest-France decline en outre, toute responsabilite de 
>> quelque nature que ce soit au titre de ce message s'il a ete altere, 
>> deforme ou falsifie. 
>
>
> -- 
> Nicolas CHARLES
>
>
> _______________________________________________
> rudder-users mailing list
> rudder-users at lists.rudder-project.org
> http://www.rudder-project.org/mailman/listinfo/rudder-users


-- 
Nicolas CHARLES

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.rudder-project.org/pipermail/rudder-users/attachments/20130712/91552f8e/attachment.html>